Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
File: API1ekH05ZC6Yudx0gVOAI4O2R4.mft (raw, json)
Hash identifier: eiqQxbRN7XzB2rQ+JtTtlRePfGYESVPcJG7IMGZk1D8=
Subject key identifier: 25:AD:C6:D1:66:73:96:09:9E:C1:2F:0E:18:88:FF:9A:9B:22:E8:3C
Authority key identifier: 00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
Certificate issuer: /CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Certificate serial: 019F905AB171620E3FB9BB3350D9C84CC1DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
Manifest number: 0AE1
Signing time: Thu 23 Jul 2026 19:01:30 +0000
Manifest this update: Thu 23 Jul 2026 19:01:30 +0000
Manifest next update: Fri 24 Jul 2026 19:01:30 +0000
Files and hashes: 1: API1ekH05ZC6Yudx0gVOAI4O2R4.crl (hash: zv9dsaNDApa4vb8xiWj4UzIJqtNLIubVeRFFFCW8qS4=)
2: Oqp0LnSyxA2FjpucrV--rkFrY9M.roa (hash: dShE79kR6w3t9UN+uBV7ehXeiyGLd3Stfbk1UBF24b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:b1:71:62:0e:3f:b9:bb:33:50:d9:c8:4c:c1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Validity
Not Before: Jul 23 19:01:30 2026 GMT
Not After : Jul 24 19:01:30 2026 GMT
Subject: CN=25adc6d1667396099ec12f0e1888ff9a9b22e83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a3:d0:93:c1:fe:f5:4c:95:31:23:b7:ef:20:
b9:d4:97:1f:1e:2c:f2:a2:c0:30:ed:41:c1:89:75:
54:e7:6f:67:32:65:c6:90:20:89:dc:7a:8e:ee:74:
e4:d7:11:8e:d1:0c:a3:ce:f7:ad:5e:6f:8d:ec:e3:
7a:ea:e8:d4:80:2d:33:37:27:d4:ee:31:7b:79:43:
ea:b9:ab:a7:68:e8:20:f6:0d:a0:24:e0:e0:73:df:
b8:f0:75:a1:6a:fa:f9:46:2b:0a:df:70:ff:59:66:
fa:61:3b:32:cc:36:4f:54:29:2d:1c:d7:7f:9d:df:
44:d4:6c:e6:d4:56:6b:81:6f:d2:d6:b0:93:9b:7a:
b3:7c:49:c5:a0:e5:b4:90:41:7e:dd:1a:0a:7a:6c:
d2:64:4a:c8:f2:88:ac:a8:b1:fd:07:6b:98:5b:ba:
9a:b3:7b:35:af:ca:4b:64:f8:d0:48:12:8c:29:0e:
66:f3:93:a0:e5:6a:0e:5f:8c:3a:fb:72:2c:de:41:
99:eb:c3:01:e7:5e:a2:8f:fc:88:55:b0:a8:3b:d3:
65:f3:c8:4c:1f:d5:27:c3:47:2d:c1:1d:e9:a9:38:
41:8a:a1:50:15:0d:18:f3:9f:de:80:4b:f5:b6:65:
57:16:35:0b:57:65:2a:ba:ba:56:d7:f1:75:d7:88:
f4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AD:C6:D1:66:73:96:09:9E:C1:2F:0E:18:88:FF:9A:9B:22:E8:3C
X509v3 Authority Key Identifier:
keyid:00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:03:42:1b:c7:a1:68:d7:a3:bc:0b:3f:f6:c6:d8:26:21:33:
b1:d8:d8:8a:99:ce:7c:1a:0e:1a:bb:0d:1a:ae:e2:4a:18:41:
d5:c3:b2:9c:5b:1f:13:cc:69:57:08:63:16:7f:7f:9e:53:d8:
43:52:80:b1:c8:44:82:b0:28:5d:08:fe:44:b6:94:cf:3e:ee:
74:4c:61:48:fe:3e:8c:45:ef:89:fd:85:84:87:22:64:06:ad:
b4:a9:2a:17:44:10:74:c7:38:48:91:11:98:bf:f2:4c:9e:7e:
3d:2b:6b:d3:e2:2c:69:66:9b:d3:fc:05:78:b5:16:00:4d:08:
53:38:a1:2b:5e:27:d3:77:11:3c:d1:84:d1:f2:dc:3e:63:ee:
03:63:aa:6c:69:61:17:7f:81:bf:77:e9:f4:e3:b3:59:ef:33:
7b:fd:56:7e:bf:25:2d:ac:d0:50:5d:94:52:80:75:7e:d8:f0:
d2:a8:a5:e9:a4:95:67:95:6b:2c:82:ee:68:41:4c:bb:e5:3b:
72:c3:53:1b:c1:29:77:69:77:b9:c1:23:2e:f7:63:27:67:36:
41:4f:69:ce:8a:c1:bb:06:10:cd:9a:1a:fe:d9:89:58:67:8d:
a8:e9:34:58:8c:bf:cc:12:dd:4d:a3:0a:60:f5:08:03:d5:12:
92:e0:42:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:51:26 2026 by rpki-client